319675 matches found
PT-2026-107562
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run script endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import , to...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an uninitialized resource, allowing a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an uninitialized resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office suite is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Apache SeaTunnel 3.0.0 Remote Code Execution
Apache SeaTunnel versions 3.0.0 and 2.3.13 contain an unauthenticated remote code execution issue in the engine REST API DynamicCompile transform. !/usr/bin/env python Apache SeaTunnel 3.0.0 Remote Code Execution Vendor: The Apache Software Foundation Product web page: https://seatunnel.apache.or...
CVE-2026-97655 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner...
CVE-2026-97655
Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-97655 , which allows a remote attacker to execute arbitrary code. The root cause is an incomplete blocklist within the code security scanner, classified as CWE-94: Improper Control of Generation of Code ('Code Injection') . This ...
CVE-2026-104334 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation...
CVE-2024-21513
CVE-2024-21513 PoC para CVE-2024-21513 Exploit original documentado por Snyk Security Research Exploit CVE-2024-21513 es una vulnerabilidad en langchain-experimental donde los resultados no validados de consultas SQL se pasaban a eval de Python, permitiendo la ejecución remota de código mediante...
CVE-2020-5902
CVE-2020-5902 / \ \ / / | | \ / \ \ / \ | / \ / \ \ | | \ \ / /| | | | | | | | | || || | | | | | | | \ / / | |/ /| | | |/ /| | | || \, | | | |/ / | | \ / | | / /| || / /| || | | / /| || / / | / || ||/|/ |/ // /| CVE-2020-5902-Scanner.py @nsflabs La interfaz de usuario de gestión de tráfico...
Moniker-Link-CVE-2024-21413-
Moniker-Link-CVE-2024-21413- El 13 de febrero de 2024, Microsoft anunció una vulnerabilidad de RCE y fuga de credenciales en Microsoft Outlook con el CVE asignado CVE-2024-21413 Moniker Link. Haifei Li de Check Point Research es acreditado por descubrir la vulnerabilidad. La vulnerabilidad elude...
nextjs-CVE-2025-55182
CVE-2025-55182 / CVE-2025-66478 React2Shell - Prueba de Concepto PoC de Ejecución Remota de Código RCE en Next.js Vulnerabilidad crítica en las Server Actions de Next.js que permite Ejecución Remota de Código sin autenticación a través de la deserialización del Protocolo React Flight Descripción...
CVE-2025-68613
CVE-2025-68613 — Fallo de aislamiento del motor de expresiones en n8n Workflow Automation El autor no asume ninguna responsabilidad por el uso indebido o los daños causados por esta investigación Se proporciona estrictamente con fines educativos y defensivos Descripción Este repositorio contiene ...
CVE-2026-106443
A flaw was found in WeasyPrint. When processing documents with external image references, the image loading mechanism passes untrusted image data to the underlying image library without restricting unsafe formats such as Encapsulated PostScript EPS. A remote attacker could provide a crafted...
relatorio-n8n.md
Informe TryHackMe — n8n: CVE-2025-68613 Vulnerabilidad: CVE-2025-68613 Publicación: 19/12/2025 CVSS: 9.9 Crítico Resumen Informe de la explotación y análisis de la vulnerabilidad de inyección de expresión en n8n que permite ejecución remota de código RCE. Documenta entorno, pasos, payloads...
RCE-Simplephpblog-biggiedroid
CVE-2025-15495 - Carga Arbitraria de Archivos que Conduce a Ejecución Remota de Código RCE Producto BiggiDroid – Simple PHP Blog CMS Página del producto: https://biggidroid.com/product/simple-php-blog/ Tipo de Vulnerabilidad Carga Arbitraria de Archivos Carga de Archivos sin Restricciones Ejecuci...
CVE-2023-41892
CVE-2023-41892 - Craft CMS Ejecución Remota de Código RCE referencias: https://github.com/advisories/GHSA-4w8r-3xrw-v25g https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/ https://blog.calif.io/p/craftcms-rce...
CVE-2026-106374
A flaw was found in chromium-browser. A type confusion vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code inside the browser sandbox by convincing a user to visit a specially crafted HTML page. Successful exploitation compromises the browser process, whic...